It seems my CyberPanel servers hosted on DigitalOcean and Linode in Singapore are experiencing a part of widespread DDoS attack.
I have a couple of accounts with these cloud providers and host multiple CyberPanel VMs on them. I am getting emails from each and every account that my servers are compromised or part of a DDOS attack.
Couple of servers are still out of warnings but port 8090 is not working on all. Also I can’t SSH to these servers as well.
I’m concerned about the security of my CyberPanel installations. Could there be a vulnerability in CyberPanel itself that’s making it a target? Or is it possible that my specific server configurations are attracting these attacks?